I have a PGB app that I published to Google, Apple and the Windows stores a little over a week ago. But today, after a small change, I am unable to publish again to iTunes Connect (using the Mac Application Loader). I get the following message:

ERROR ITMS-90046: "Invalid Code Signing Entitlements. Your application bundle's signature contains code signing entitlements that are not supported on iOS. Specifically, value '89X275XXXX.uk.co.syntagm.*' for key 'application-identifier' in 'Payload/WordEke.app/WordEke' is not supported. This value should be a string starting with your TEAMID, followed by a dot '.', followed by the bundle identifier."

This means nothing to me. I am using the same publishing certificate doing the iOS build as I did earlier this month, I have also deleted it and uploaded it again, with no improvement. I can build and test the app using my development certificate, but suddenly I just can't publish.

This appears to be the same problem that others are reporting to do with wildcards in the application-identifier. These worked up until about a week ago. Now it doesn't but creating a provisioning profile for each specific app definitely fixes it.

entitlements were in the past automatically set during the build. in xcode 8 this is no longer the case and it must be set manually in the project entitlements file.

mea culpa we passed through all entitlement keys from the provisioning file including the wildcard app-identifier. this has now been removed with only valid app capability keys being copied over to the app's entitlements file.